DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
969ae4b59e823728ce9b6a3dbf4d203e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
969ae4b59e823728ce9b6a3dbf4d203e_JaffaCakes118
Size
635KB
MD5
969ae4b59e823728ce9b6a3dbf4d203e
SHA1
6838491af1d09282f9d02a5837ae4d4f9ecc6c2b
SHA256
c2d6a635d1c30b27b38796b21e7c8df5436393d4a84c3b002c5b7ea7c1d4ced1
SHA512
cea3376c3a9e1b9a48f7698927a89274a024c5842e6d21ca82f5cd2768fe85f9f7b5b10d7e5a84731ef09ceb0062af966f365e307686bfac0ef99e76bfda6a27
SSDEEP
12288:4M0t9FNcxDMmfrLAF8rZIRf2MmsX4ezhw4LVQWhu/fO79s:otjNcXnVInv4e1w0VDhm
Checks for missing Authenticode signature.
resource |
---|
969ae4b59e823728ce9b6a3dbf4d203e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ